Offensive Security Engineer

📋 Description

• Conduct comprehensive penetration tests across web applications, APIs, cloud environments
• Plan and execute red team engagements that emulate the TTPs of cyber and criminal threat actors
• Perform assumed-breach and objective-based assessments to test detection and response capabilities
• Partner with detection engineering, threat intelligence, and incident response teams to validate
• Contribute adversary tradecraft insights to inform detection rule development, threat hunting
• Support incident investigations by providing offensive expertise, log analysis, and root cause

🎯 Requirements

• 5+ years of experience in offensive security, penetration testing, red teaming, or a related field
• Strong programming skills in Python, Go, or similar languages, with demonstrated experience
• Deep knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability
• Hands-on experience with cloud platforms (AWS, Azure, or GCP), including cloud-native attack
• Proficiency with offensive tooling such as Burp Suite, Cobalt Strike, Mythic, Sliver, BloodHound
• Familiarity with adversary tradecraft and frameworks such as MITRE ATT&CK, including TTPs for

🎁 Benefits

• Equity participation in Stripe's growth
• 401(k) plan with matching contributions from day one
• Comprehensive medical, dental, and vision coverage
• Wellness stipends
• Annual budget for training, certifications, and conference attendance